CVE-2026-75573
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured output can use the password to access the TLS client key.
Risk Assessment
A local user could gain access to the TLS client key, potentially leading to confidentiality breach of communications.
Recommendation
Avoid providing the password in the connection URI if it is already provided via command-line option, or secure standard error output from unauthorized users.
Original NVD description (English source)
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.